Question

Solved1.10K views5th May 2023adl2099 cluster DMS HTTPS

5

Alberto De Luca [DevOps Enabler]4.19K 4th May 2023 1 Comment

Please Dojo, are there any cases where it could be feasible to use HTTPS only on specific DMAs in a DMS cluster?

Alternatively, is it ok to assume that when a cluster is shifted to HTTPS, all of the related DMAs must use https?

Thanks

Alberto De Luca [DevOps Enabler] Selected answer as best 5th May 2023

Alberto De Luca [DevOps Enabler] commented 4th May 2023

Checking this area of the documentation, but haven’t found any specific recommendation in terms of scenarios where the HTTPS could be deployed on part of a DMS cluster:

https://docs.dataminer.services/user-guide/Advanced_Functionality/DataMiner_Agents/Configuring_a_DMA/Setting_up_HTTPS_on_a_DMA.html#specifying-auto-detection-information-for-an-inter-dma-https-connection

1 Answer

Checking this area of the documentation, but haven’t found any specific recommendation in terms of scenarios where the HTTPS could be deployed on part of a DMS cluster:

https://docs.dataminer.services/user-guide/Advanced_Functionality/DataMiner_Agents/Configuring_a_DMA/Setting_up_HTTPS_on_a_DMA.html#specifying-auto-detection-information-for-an-inter-dma-https-connection

score 6 · Answer 1 · 2023-05-05T19:08:36+00:00

HTTPS is optional, but highly recommended (otherwise data between clients and the DMA is transferred unencrypted including passwords of users logging in etc).

HTTPS has to be configured per DMA, it's not required to configure it on every DMA of the DMS cluster. For example, HTTPS can be configured on the frontend DMA only, although we recommend to enforce it on all DMAs.

HTTPS at DMS cluster level – can it work by enabling HTTPS only on selected DMAs?

1 Answer